faad2: add upstream commit links

My last pull request was merged, including fixes for CVE-2019-6956,
CVE-2018-20360 and CVE-2018-20199. See upstream bug report and PR for
more information.

Update dla-needed entry.